1. The short version
- Camera and screen frames are not stored. They are sampled in your browser, sent to our AI provider to be interpreted, and discarded. We keep no video.
- Audio is not stored. Your voice is streamed for real-time understanding and is not retained as a recording after the session.
- What we do keep is the material you deliberately upload, the text extracted from it, and the boards your sessions produce — because those are the things you asked us to remember.
- We do not sell your data and we do not use it to train third-party foundation models.
2. What we collect
Account data
Your email address and authentication identifiers, held so you can sign in. If you sign in with a third-party provider, we receive the basic profile they release to us.
Study profile
Your academic level and optional field of study. This is used for one purpose: pitching explanations at the right level.
Course material you upload
PDFs of syllabi, notes and slides. We extract their text, split it into passages and compute vector embeddings so the tutor can cite your own materials rather than a generic textbook. The original file is stored in your private bucket.
Session output
The blackboard content a session produces, the tutor’s interventions, and timestamps. This is what makes a module still remember last week’s lesson.
Live camera, screen and microphone
Only while a session is running, and only with the permission your browser asks you for. Frames and audio are transmitted for real-time interpretation and are not written to our storage. You can stop sharing at any time from the session controls or your browser.
Technical and usage data
Basic operational logs and error reports needed to keep the service running and secure, plus the Energy balance used to meter your usage.
3. Why we may process it
- To perform our contract with you — running sessions, storing your courses, remembering your boards, billing your subscription.
- Legitimate interests — keeping the service secure, preventing abuse, diagnosing faults, and understanding aggregate usage to improve the product.
- Consent — camera, screen and microphone access, which your browser requests explicitly and you can withdraw at any time.
- Legal obligation — tax and accounting records relating to purchases.
4. Who we share it with
We use a small number of processors, each for a defined purpose:
- Supabase — database, authentication and file storage. Your rows are isolated by row-level security.
- OpenAI — real-time speech, vision and language understanding, and text embeddings. Content is sent to be processed and returned; under OpenAI’s API terms it is not used to train their models.
- Lemon Squeezy — our Merchant of Record. They handle checkout, payment details and tax. We never see or store your card details.
- Our hosting provider — serving the application.
We may also disclose information where legally required, or to protect the rights and safety of our users. We do not sell personal data and we do not share it with advertisers.
5. International transfers
Our providers may process data outside your country, including in the United States. Where that happens we rely on the safeguards those providers offer, such as Standard Contractual Clauses.
6. How long we keep it
- Live camera, screen and audio — not retained; discarded once interpreted.
- Account, courses, uploads and saved boards — until you delete them or close your account.
- Deleted content — removed from active systems promptly and from routine backups within 30 days.
- Billing records — retained as long as tax law requires, typically 6–7 years, by our Merchant of Record.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, delete or restrict processing of your personal data, and to object to processing based on legitimate interests. You can delete individual courses, modules and uploads from inside the app at any time.
To exercise any right, email support@askvizo.com. We will respond within 30 days. If you are in the EEA or UK you also have the right to complain to your local data protection authority.
8. Children
Vizo is not directed at children under 16. We do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.
9. Security
Data is encrypted in transit and at rest. Access to your rows is enforced at the database level by row-level security policies, not merely by application code. Billing entitlements can only be changed by our payment webhook — never by a browser client. No system is perfectly secure, but we design on the assumption that any given layer may fail.
10. Cookies
We use strictly necessary cookies to keep you signed in and to maintain your session. We do not use advertising or cross-site tracking cookies.
11. Changes and contact
We will post any changes here and, where the change is material, notify you in the app or by email. Contact: support@askvizo.com.